diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 18d5cf4..601d724 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -13,6 +13,8 @@ jobs:
     environment: staging
     permissions:
       checks: write
+      contents: read
+      security-events: write
     steps:
       - name: "build: checkout the latest changes"
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2